Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-2918.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/logitechvideocall_start.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control (wcamxmp.dll 2.0.3470.448) via an overly long string passed to the Start() method, allowing arbitrary code execution.
Description
Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control (wcamxmp.dll 2.0.3470.448) via an overly long string passed to the Start() method, allowing arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control (wcamxmp.dll 2.0.3470.448) via an overly long string passed to the 'Start()' method, allowing arbitrary code execution. It generates a malicious HTML page with embedded JavaScript to trigger the vulnerability.